Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7relevanssi relevanssi Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.23%May 31, 2025
- Medium6.9A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0.Check if you run itEPSS 0.53%May 31, 2025
- Medium6.9A vulnerability was found in Campcodes Online Hospital Management System 1.0.Check if you run itEPSS 0.53%May 31, 2025
- Medium5.1django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.Check if you run itEPSS 0.21%May 31, 2025
- Medium6.9A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical.Check if you run itEPSS 0.56%May 30, 2025
- Medium6.9A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical.Check if you run itEPSS 0.56%May 30, 2025
- Medium6.9An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user.Check if you run itEPSS 0.13%May 30, 2025
- High8.5An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.Check if you run itEPSS 0.21%May 30, 2025
- High8.5An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.Check if you run itEPSS 0.19%May 30, 2025
- Medium4.8An open debug interface was reported in the Legion Space software included on certain Legion devices that could allow a local attacker to execute arbitrary code.Check if you run itEPSS 0.16%May 30, 2025
- Medium4.7Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces.Check if you run itEPSS 0.78%May 30, 2025
- High8.3An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data.Check if you run itEPSS 0.21%May 30, 2025
- Medium6.9An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data.Check if you run itEPSS 0.19%May 30, 2025
- Medium6.9Android based smartphones from vendors such as Ulefone and Krüger&Matz contain "com.pri.factorytest" application preloaded onto devices during manufacturing process.Check if you run itEPSS 0.20%May 30, 2025
- Medium4.2A privilege escalation vulnerability exists in multiple WSO2 products due to a business logic flaw in SOAP admin services.Check if you run itEPSS 0.74%May 30, 2025
- Low3.1Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly enforce access controls for guest users accessing channel member information, allowing auCheck if you run itEPSS 0.25%May 30, 2025
- High7.5Insertion of Sensitive Information Into Sent Data vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-customers-exporter allows Retrieve Embedded SCheck if you run itEPSS 0.37%May 30, 2025
- Medium4.7A vulnerability was found in systemd-coredump.Check if you run itEPSS 1.28%May 30, 2025
- Critical9.1A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below.Check if you run itEPSS 0.39%May 30, 2025
- Medium6.3A vulnerability exists in the media upload component of the Asset Suite versions listed below.Check if you run itEPSS 0.24%May 30, 2025
- Medium5.9ALAS-2025-1981 (medium): perlCheck if you run itEPSS 0.50%May 30, 2025
- High8.7Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrative user with both "User Management" and "User Group ManagemenCheck if you run itEPSS 0.57%May 30, 2025
- Medium6.4The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Compare and Google Maps widgets in all versions upCheck if you run itEPSS 0.30%May 30, 2025
- Medium6.5The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the woo_sCheck if you run itEPSS 0.27%May 30, 2025
- High8.7An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting alCheck if you run itEPSS 0.57%May 30, 2025
Sort